Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This feature enables CloudStack administrators to configure domain-specific OAuth2 providers. In multi-tenant environments, each domain (representing a customer, department, or team) can have its own OAuth2 provider configuration. This allows organizations to maintain separate OAuth credentials per domain, ensuring users authenticate against the correct identity provider for their team.

Scope:

  • Register OAuth providers for specific domains

  • Domain-level oauth2.enabled setting to control OAuth availability per domain

  • In UI, add new tab for OAuth login (similar to SSO tab)

  • In the new OAuth tab, show domain-based OAuth providers only after user enters domain and clicks a button (or removes focus from input)

  • Global OAuth providers stay visible at all times

  • Error handling - duplicate provider rejection, provider not found, OAuth disabled for domain


UI Mockups: 

Image Added

API Changes:

registerOAuthProvider

New parameter:

...